Best headers plugins for WordPress
The most popular headers plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Headers Security Advanced & HSTS WP leads with 90K+ active installs, ahead of WP Hide & Security Enhancer (50K+) and Redirect (4K+). All 48 plugins tagged “headers” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 headers plugins
- 1.Headers Security Advanced & HSTS WP
The most installed headers plugin, with 90K+ active installs. Rated 4.9 from 79 reviews, updated 1 week ago.
- 2.
WP Hide & Security Enhancer50K+ active installs. Rated 4.3 from 275 reviews, updated 1 month ago.
- 3.Redirect
4K+ active installs. Rated 5.0 from 14 reviews, last updated 8 years ago. Tested only up to WordPress 4.9.35.
- 4.
Host Header Injection Fix400+ active installs. Rated 5.0 from 6 reviews, updated 4 days ago.
- 5.Add Custom Header Images
400+ active installs. Only 3 reviews so far, updated 2 months ago.
- 6.
J7 Beaver Header Footer Templates300+ active installs. Only 1 review so far, updated 11 months ago. Tested only up to WordPress 6.8.12.
- 7.HTTP/1.1 403 Forbidden header on a failed login
200+ active installs. Only 2 reviews so far, last updated 10 years ago. Tested only up to WordPress 4.4.34.
- 8.
Security Hardener200+ active installs. No reviews yet, updated 1 week ago.
- 9.Last-Modified and If-Modified-Since Headers
200+ active installs. Only 2 reviews so far, last updated 5 years ago. Tested only up to WordPress 5.7.21.
- 10.LowerMedia Sticky.js Menus
100+ active installs. Rated 4.9 from 12 reviews, last updated 11 years ago. Tested only up to WordPress 4.1.42.
All 48 plugins tagged “headers”
Headers Security Advanced & HSTS WP
#479by Andrea Ferro9 days ago
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
- Installs
- 90K+
- Rating
- 4.9(79)
- Downloads
- 1.3K/day

WP Hide & Security Enhancer
Up in the last 7 days:1#756by nsp-code1 month ago
Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.
- Installs
- 50K+
- Rating
- 4.3(275)
- Downloads
- 330/day
Redirect
Down in the last 7 days:3#3,230by willshouse9 years ago
Easily redirect any post or page to another page with a dropdown menu or by manually typing in a URL. Check out the screenshots.
- Installs
- 4K+
- Rating
- 5.0(14)
- Downloads
- 26/day

Host Header Injection Fix
Down in the last 7 days:21#9,397by Jeff Starr4 days ago
Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.
- Installs
- 400+
- Rating
- 5.0(6)
- Downloads
- 17/day
Add Custom Header Images
Down in the last 7 days:23#9,627by Andy Fragen2 months ago
Remove default header images and load custom header images from 'The Headers' page. Allows for easy selection of random header images in your theme.
- Installs
- 400+
- Rating
- 4.7(3)
- Downloads
- 9/day

J7 Beaver Header Footer Templates
Up in the last 7 days:20#10,989by jatacid11 months ago
Adds a panel to the Theme Customizer to insert a Beaver Builder layout as a header/footer globally on each page.
- Installs
- 300+
- Rating
- 5.0(1)
- Downloads
- 6/day
HTTP/1.1 403 Forbidden header on a failed login
Up in the last 7 days:32#11,369by atmosphear10 years ago
Send an "HTTP/1.1 403 Forbidden" header on a failed login instead of the default "HTTP/1.1 200 OK"
- Installs
- 200+
- Rating
- 5.0(2)
- Downloads
- 5/day

Security Hardener
Up in the last 7 days:104#11,787by Marc Armengou11 days ago
Hardens WordPress with secure headers, login protection, user enumeration blocking, rate limiting, and a built-in security checklist.
- Installs
- 200+
- Rating
- –
- Downloads
- 23/day
Last-Modified and If-Modified-Since Headers
Up in the last 7 days:32#11,926by zubovd5 years ago
Add Last-Modified anв support If-Modified-Since Headers
- Installs
- 200+
- Rating
- 5.0(2)
- Downloads
- 6/day
LowerMedia Sticky.js Menus
Up in the last 7 days:8#14,241by 9ete11 years ago
Sticky Headers, Menus, Widgets, Anything! WordPress plugin that integrates sticky.js and makes your primary navigation menu and/or header sticky (wil …
- Installs
- 100+
- Rating
- 4.9(12)
- Downloads
- 11/day

HT Security
Down in the last 7 days:58#14,692by WPFastSec2 months ago
Complete Security Suite: Security Headers, CVE Detection, Core Integrity, Login Alerts, Plugin Update Management, Force Cron, and Maintenance Mode.
- Installs
- 100+
- Rating
- 5.0(1)
- Downloads
- 11/day

Secure HTTP Headers
Down in the last 7 days:36#15,375by shasha3105 years ago
Secure HTTP headers - Essential, and easy.
- Installs
- 100+
- Rating
- 3.0(2)
- Downloads
- 0/day
"SEO-HEADERS-Easy" Protocol HTTP 1.1
#15,805by Smiling_Hemp11 years ago
Sends to a client correct HTTP headers Last Modified, Cache Control and 304 Not Modified
- Installs
- 100+
- Rating
- 4.7(3)
- Downloads
- 0/day

Better Headers
Up in the last 7 days:240#17,927by bettersecurity2 years ago
Improve the security of your website by easily setting HTTP response headers to enable browser protection
- Installs
- 80+
- Rating
- 5.0(1)
- Downloads
- 3/day

EssentialHeaders
#19,962by Alex Hedström2 months ago
Adds the essential HTTP security headers WordPress leaves out—on every public site response.
- Installs
- 60+
- Rating
- –
- Downloads
- 0/day
Security Headers & Caching
Up in the last 7 days:334#23,303by Studio Be41 year ago
Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day
Basic-SEO
Down in the last 7 days:140#23,317by jonbullock14 years ago
Applies basic search engine optimisations to your WordPress powered site.
- Installs
- 30+
- Rating
- 4.0(1)
- Downloads
- 11/day

AcyMailing
Up in the last 7 days:500#24,646by AcyMailing Newsletter Team1 month ago
Add custom email headers to the sent emails.
- Installs
- 30+
- Rating
- –
- Downloads
- 11/day
Auto Anchor
Up in the last 7 days:185#25,698by benediktbergmann3 years ago
Auto Anchor is a WordPress plugin. It adds an HTML anchor to every Header-tag (h2-h6) and shows a small chain icon on the side when one is hovering ov …
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day

BaseCloud Security Manager
Down in the last 7 days:299#27,912by BaseCloud8 months ago
🛡️ Enterprise-grade WordPress security made simple. Implement military-standard HTTP security headers with zero technical knowledge required.
- Installs
- 20+
- Rating
- 5.0(2)
- Downloads
- 0/day
Technoscore Hotjar Tracking
Up in the last 7 days:96#28,992by Technoscore9 years ago
Technoscore Hotjar Tracking is best plugin for WordPress to add Hotjar code to header part of Selected/All webpages.
- Installs
- 10+
- Rating
- 5.0(1)
- Downloads
- 0/day

ELADIVINE Core
#29,058by Elad Yanai5 days ago
Security hardening that works on any theme, and steps aside wherever another plugin already does the same job.
- Installs
- 10+
- Rating
- –
- Downloads
- 50/day

SecurelyWP
Up in the last 7 days:1,017#29,394by SecurelyWP2 months ago
SecurelyWP is a simple security plugin that protects your WordPress site right after activation—no setup needed for most features.
- Installs
- 10+
- Rating
- –
- Downloads
- 3/day

LH Add Headers
Up in the last 7 days:268#30,184by shawfactor9 years ago
Adds the ETag, Last-Modified, and if appropriate 304 headers to HTTP responses generated by WordPress for more efficient caching.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Fix It Easy Security Headers
Up in the last 7 days:682#32,183by WP Fix It - WordPress Experts1 year ago
Configure core HTTP security headers for your WordPress site in a few clicks.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Strict Security Headers
Up in the last 7 days:57#34,014by Justin Kopepasah3 years ago
Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
HeaderShield
Up in the last 7 days:361#34,079by Vishwa7 months ago
Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Headit
#35,312by StampyCode9 years ago
Headit is a simple plugin to allow you to add custom HTTP response headers to your site.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Simple Header Footer Scripts
Down in the last 7 days:3,948#39,634by Bharat Mandava8 years ago
Very simple Header Footer Scripts plugin with no ads or paid upgrades.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Plugin Name
#40,183by oQeySites15 years ago
oQey Headers plugin is a Wordpress Plugin that allows to add and manage images for blog header easily.
- Installs
- 10+
- Rating
- 1.0(1)
- Downloads
- 2/day
Results Count Remix
Up in the last 7 days:1,005#44,703by Rick Beckman18 years ago
Adds both the number of displayed posts as well as the total number of returned posts to search and archive pages.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Genesis Email Headers
Up in the last 7 days:1,427#44,723by Damjan11 years ago
Customization Email Headers.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

WebDoktoru Security
#46,576by WebDoktoru10 months ago
Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Delete Custom Header
Down in the last 7 days:12,173#47,451by Beej12 years ago
Delete uploaded header images and remove them from the database.
- Installs
- 10+
- Rating
- –
- Downloads
- 1/day

fepo CSP & Security Headers
Up in the last 7 days:16,960#53,263by fepo10 days ago
Scans your pages, builds one Content-Security-Policy and sends it with the other security headers. Nothing leaves your website.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day

AiutoComputerHelp HTTP Header Audit
Down in the last 7 days:5,066#54,294by aiutocomputerhelp27 days ago
Read-only audit of HTTP security headers and related same-site HTTPS behavior returned by your WordPress site.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Safe Headers Scanner
Up in the last 7 days:1,093#56,676by amir tohidlo1 year ago
Scan themes and plugins for potential header issues such as whitespace before/after PHP tags or direct output before headers.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Tecnología Geek Seguridad Geek
Up in the last 7 days:8,901#57,402by Tecnología Geek10 days ago
Security audit and hardening for WordPress in plain language: a clear 0-100 score, what every finding means, and safe one-click fixes.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day

HeaderGenie Security Headers
#63,256by headergenie5 days ago
Add HTTP security headers from WordPress. Scan what your site sends and enable safe defaults.
- Installs
- <10
- Rating
- –
- Downloads
- 11/day

Fizfy
Down in the last 7 days:14,475#64,377by Fizfy6 years ago
Fizfy is a Conversion & Sales Software that helps websites, Influence Visitors to increase sales & conversions. Easy to Add Fizfy Pixel Code i …
- Installs
- <10
- Rating
- 5.0(1)
- Downloads
- 0/day
Sovaryx Login Security
#66,033by pieceagency5 months ago
A free WordPress security plugin focused on login protection, security diagnostics, and API protection.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Kurt Vonnegut HTTP header
Up in the last 7 days:2,479#66,600by Krasimir Stoev19 days ago
Add an X-Kurt-Legacy header.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Kareva Security Headers
Up in the last 7 days:3,110#69,455by karevatechsol269 days ago
Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.
- Installs
- <10
- Rating
- –
- Downloads
- 23/day

JM Website Security Hardening
#69,502by Jose Mortellaro2 days ago
Decide what your site may load and who may use its files. Security headers are written for you.
- Installs
- <10
- Rating
- –
- Downloads
- 44/day
Beplus Security Headers & Script Auditor
Down in the last 7 days:7,135#70,598by rimbeplus21 days ago
Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Traffic Origin Guard
#71,211by jasond7274 months ago
Protect your WordPress origin by requiring a secret request header and blocking direct access with Apache .htaccess rules.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day